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AMENDMENTS TO THE CLAIMS 

This listing of claims will replace all prior versions, and listings, of claims in the application: 

1 . (currently amended) A method for improving reliability and availability of a load 
balanced server comprising the steps of: 

monitoring the server's performance, 

wherein monitoring comprises measuring one or more parameters selected from 
the group consisting of a currently available number of threads, a 
maximum number of available threads, memory usage percentage, and a 
number of processes running; 
detecting when the server's performance is worse than a failover threshold; ffiid 
sending a message to one or more clients indicating that said one or more clients should 

failover to an alternate server; 
disconnecting a first set of one or more clients, wherein said first set of one or more 

clients comprise one or more clients from said one or more clients; and 
connecting a second set of one or more clients, wherein the second set of one or more 
clients comprise one or more clients from said first set of one or more clients . 

2. (original) The method of Claim 1, wherein the server is an AAA server and the one or 
more clients are AAA clients. 

3. (original) The method of Claim 1, wherein the step of sending a message comprises 
sending an ICMP Echo message. 

4. (canceled) 



50325-0808 (CPOL 275440) 



2 



5. (canceled). 

6. (canceled). 

7. (previously presented) The method of Claim 1, wherein the step of monitoring further 
comprises measuring availability of services, wherein the services of which the 
availability is checked on the server comprise mandatory services and dependent services. 

8. (original) The method of Claim 1, further comprising the step of determining the one or 
more clients to which to send the message based on a predefined list of clients. 

9. (original) The method of Claim 1, further comprising the step of determining the one or 
more clients to which to send the message based on a network device group. 

10. (original) The method of Claim 1, further comprising the step of determining the one or 
more clients to which to send the message based on network topology. 

11. (original) The method of Claim 1, further comprising the step of determining the alternate 
server based on a list configured on each of said one or more clients. 

12. (original) The method of Claim 1, wherein the message that is sent to said one or more 
clients comprises a list of one or more altemate servers to which said one or more clients 
can failover. 

13. (original) The method of Claim 1, further comprising the step of checking authority of a 
message sent between a sender and a receiver by comparing a first hashed value, 
produced by the sender and sent with the message, with a second hashed value produced 
by the receiver. 
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14. (original) The method of Claim 13, further comprising the step of producing the first 
hashed value and the second hashed value using a one-way hash algorithm with a shared 
secret as a key and a combination of the server's IP address and the client's IP address as 
input. 

15. (original) The method of Claim 13, further comprising the step of producing the first 
hashed value and the second hashed value using a one-way hash algorithm with a 
combination of a shared secret, the server's IP address, and the client's IP address as 
input. 

16. (original) The method of Claim 1, further comprising the step of connecting with a 
second client. 

17. (currently amended) The method of Claim 16, further comprising the step of initiating the 
step of connecting with said second client based on a request from the second client. 

18. (currently amended) The method of Claim 17, further comprising the step of initiating the 
step of connecting with said second client based on a timeout mechanism configured on 
the second client. 

19. (currently amended) The method of Claim 16, further comprising the step of initiating the 
step of connecting with said second client based on a request by the server. 

20. (currently amended) The method of Claim 19, further comprising the step of initiating the 
step of connecting with said second client based on the server's performance being better 
than a connection threshold. 

21. (previously presented) The method of Claim 20, wherein the step of initiating comprises 
the step of comparing the connection threshold with a function relating one or more 
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parameters selected from the group consisting of server related parameters, system related 
parameters, and availability of services on the server. 

22. (original) The method of Claim 21, wherein the server related parameters comprise a 
currently available number of threads and a maximum number of available threads. 

23. (original) The method of Claim 21, wherein the system related parameters comprise CPU 
usage percentage, memory usage percentage, and number of processes running. 

24. (original) The method of Claim 21, wherein the services of which the availability is 
checked on the sei-ver comprise services mandatory for correct functioning of the server 
and services needed for logging on the server. 

25. (canceled) 

26. (original) The method of Claim 1, wherein said one or more clients comprise all clients 
connected to said server. 

27. (original) The method of Claim 1, wherein said one or more clients comprise a proper 
subset of all clients connected to said server. 

28. (canceled) 

29. (currently amended) The method of Claim [[28]] i, wherein the step of connecting said 
second set of one or more clients comprises the steps of: 

connecting each client of said second set of one or more clients at a different time; and 
initiating the step of connecting each client based on a timeout mechanism configured on 
each client. 
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30. (currently amended) The method of Claim [[28]] 1. further comprising the step of 
initiating the step of connecting said second set of one or more clients based on the 
server's performance being better than a connection threshold, wherein the server's 
performance is measured as a function relating one or more parameters selected from the 
group consisting of server related parameters, system related parameters, and availability 
of services on the server. 

31. (currently amended) The method of Claim [[28]] 1, wherein said second set of one or 
more clients comprises multiple clients, and the step of connecting a second set of one or 
more clients comprises the steps of: 

connecting a third set of one or more clients at a first time, wherein said third set of one 
or more clients comprises one or more clients from said multiple clients; and 

connecting a fourth set of one or more clients at a second time, wherein said first time is 
different than said second time, and said second set of one or more clients 
comprises one or more clients from said multiple clients. 

32. (currently amended) The method of Claim [[28]] i, wherein said second set of one or 
more clients comprises all of said one or more clients. 

33. (currently amended) A computer-readable storage medium carrying one or more 
sequences of instructions for improving reliability and availability of a load balanced 
server, which instructions, when executed by one or more processors, cause the one or 
more processors to carry out the steps of: 

monitoring the server's performance, 

wherein monitoring comprises measuring one or more parameters selected from 
the group consisting of a currently available number of threads, a 
maximum number of available threads, memory usage percentage, and a 
number of processes running; 

detecting when the server's performance is worse than a failover threshold; and 



50325-0808 (CPOL 275440) 



6 



sending a message to one or more clients indicating that said one or more clients should 

failover to an alternate server; 
disconnecting a first set of one or more clients, wherein said first set of one or more 



clients comprise one or more clients from said one or more clients; and 
connecting a second set of one or more clients, wherein the second set of one or more 
clients comprise one or more clients from said first set of one or more clients . 

34. (currently amended) An apparatus for improving reliability and availability of a load 
balanced server, comprising: 

means for monitoring the server's performance, 

wherein monitoring comprises measuring one or more parameters selected from 
the group consisting of a currently available number of threads, a 
maximum number of available threads, memory usage percentage, and a 
number of processes running; 
means for detecting when the server's performance is worse than a failover threshold; esad 
means for sending a message to one or more clients indicating that said one or more 

clients should failover to an alternate server; 
means for disconnecting a first set of one or more clients, wherein said first set of one or 

more clients comprise one or more clients from said one or more clients; and 
means for connecting a second set of one or more clients, wherein the second set of one 
or more clients comprise one or more clients from said first set of one or more 
clients . 

35. (currently amended) An apparatus for improving reliability and availability of a load 
balanced server, comprising: 

a network interface that is coupled to the data network for receiving one or more packet 
flows therefrom; 

a processor; 

one or more stored sequences of instructions which, when executed by the processor, 
cause the processor to carry out the steps of: 
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monitoring the server's performance, 

wherein monitoring comprises measuring one or more parameters selected from 
the group consisting of a currently available number of threads, a 
maximum number of available threads, memory usage percentage, and 
number of processes running; 
detecting when the server's performance is worse than a failover threshold; efftd 
sending a message to one or more clients indicating that said one or more clients should 

failover to an alternate sei-ver; 
disconnecting a first set of one or more clients, wherein said first set of one or more 

clients comprise one or more clients from said one or more clients; and 
connecting a second set of one or more clients, wherein the second set of one or more 
clients comprise one or more clients from said first set of one or more clients . 

36. (new) The computer-readable storage medium of Claim 33, wherein the server is an AAA 
server and the one or more clients are AAA clients. 

37. (new) The computer-readable storage medium of Claim 33, wherein the step of sending a 
message comprises sending an ICMP Echo message. 

38. (new) The computer-readable storage medium of Claim 33, wherein the instructions, 
when executed, further cause the one or more processors to perform the step of checking 
authority of a message sent between a sender and a receiver by comparing a first hashed 
value, produced by the sender and sent with the message, with a second hashed value 
produced by the receiver. 

39. (new) The computer-readable storage medium of Claim 33, wherein the instructions, 
when executed, further cause the one or more processors to perform the steps of: 
initiating a connection with a second client, based on one or more of: 

a request from the second client; 

a timeout mechanism configured on the second client; 

50325-0808 (CPOL 275440) 8 



a request by the server; and 

the server's performance being better than a connection threshold, 
wherein initiating the connection with the second client further comprises comparing the 

connection threshold with a function relating one or more parameters selected 

from the group consisting of server related parameters, system related parameters, 

and availability of services on the server; and 
connecting with a second client. 

40. (new) The apparatus of Claim 34, wherein the server is an AAA server and the one or 
more clients are AAA clients. 

41 . (new) The apparatus of Claim 34, wherein the means for sending a message further 
comprises sending an ICMP Echo message. 

42. (new) The apparatus of Claim 34, further comprising means for checking authority of a 

message sent between a sender and a receiver by comparing a first hashed value, 
produced by the sender and sent with the message, with a second hashed value produced 
by the receiver. 

43. (new) The apparatus of Claim 34, further comprising: 

means for initiating a connection with a second client, based on one or more of: 
a request from the second client; 
a timeout mechanism configured on the second client; 
a request by the server; and 

the server's performance being better than a connection threshold, 

wherein the means for initiating the connection with the second client further comprises 
means for comparing the connection threshold with a function relating one or 
more parameters selected from the group consisting of server related parameters, 
system related parameters, and availability of services on the server; and 

means for connecting with a second client. 
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44. (new) The apparatus of Claim 35, wherein the server is an AAA server and the one or 
more clients are AAA clients. 

45. (new) The apparatus of Claim 35, wherein the step of sending a message further 
comprises sending an ICMP Echo message. 

46. (new) The apparatus of Claim 35, further comprising the step of checking authority of a 
message sent between a sender and a receiver by comparing a first hashed value, 
produced by the sender and sent with the message, with a second hashed value produced 
by the receiver. 

47. (new) The apparatus of Claim 35, further comprising the steps of: 
initiating a connection with a second client, based on one or more of: 

a request from the second client; 

a timeout mechanism configured on the second client; 

a request by the server; and 

the server's performance being better than a connection threshold, 
wherein the step of initiating the connection with the second client further comprises 
comparing the connection threshold with a function relating one or more 
parameters selected from the group consisting of server related parameters, system 
related parameters, and availability of services on the server; and 
connecting with a second client. 
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